PYSEC-2026-2430 Crawlee for Python: SSRF via sitemap-derived URLs

Overview - Vulnerability type: Blind SSRF - Affected components: src/crawlee/utils/sitemap.py, src/crawlee/utils/robots.py, src/crawlee/requestloaders/sitemaprequestloader.py, and all built-in HTTP clients. - Trigger: an attacker-controlled sitemap or robots.txt containing a URL that points to an...

CVE-2026-54891 Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server data. The...

PT-2026-45060

Name of the Vulnerable Software and Affected Versions praisonai-platform affected versions not specified Description An Insecure Direct Object Reference IDOR exists in the dependency management endpoints. The system verifies if a user is a member of a workspace but fails to verify if the specific...

Enhancing Adversarial Robustness in Network Intrusion Detection: A Layer-Wise Adaptive Regularization Approach

The new wave of adversarial attacks that utilize gradient-related vulnerabilities in neural network-based classifiers makes Network Intrusion Detection Systems more open to such threats. Although state-of-the-art adversarial training methods have shown promising results in producing more robust...

EUVD-2017-7954

Malware in sbrugna...

EUVD-2012-1757

Malware in sbrugna...

EUVD-2012-1756

Malware in sbrugna...

EUVD-2016-9637

Malware in sbrugna...

EUVD-2023-39839

Malicious code in bioql PyPI...

EUVD-2022-35588

Malicious code in bioql PyPI...

CVE-2025-7903 yangzongzhuan RuoYi Image Source ui layer

A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The...

Gh0stEdit: Exploiting Layer-Based Access Vulnerability within Docker Container Images

Whitepaper called Gh0stEdit: Exploiting Layer-Based Access Vulnerability Within Docker Container Images...

CVE-2025-43010

CVE-2025-43010 affects SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer). An authenticated attacker with SAP standard authorization can remotely execute a function module and replace arbitrary ABAP programs due to lack of input validation and missing authorization checks. Re...

PT-2023-35597 · Pcpp · Pcpp

Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a stack-buffer-overflow read error. It occurs in the getReferenceIdentifierString function within the NtpLayer of the pcpp library, which is called by the...

PT-2023-21795 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing Tx/Rx commands from QDART. This can potentially lead to unspecified consequences. There is no information provided...

UBUNTU-CVE-2023-0199

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering...

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

Silicon Labs Wi-SUN SDK 安全漏洞

Silicon Labs Wi-SUN SDK is an industry-leading software stack and development tool for Wi-SUN application development from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Wi-SUN SDK v1.5.0 and earlier versions, which stems from an issue with the MAC layer security of the...

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

OPENSUSE-SU-2021:0810-1 Security update for singularity

This update for singularity fixes the following issues: singularity was updated to version 3.7.3: - Fix for CVE-2021-29136: A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a symlink with the name '.' or '/', when...